CVE-2026-19747

CRITICAL 9.8CVE-2026-19747 · Published 13/08/2026 · updated 14/08/2026

In short

CVE-2026-19747 is a CRITICAL (CVSS 9.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.

References

howitouchyou/Tenda-Smart-Camera-Vulnerability
vuldb.com/cve/CVE-2026-19747
vuldb.com/submit/868463
vuldb.com/vuln/389498
vuldb.com/vuln/389498/cti
tenda.com.cn

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free